CyberSecBulletin

LangChat vulnerabilities

We track 1 vulnerability in LangChat products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest LangChat vulnerabilities

  • 9.8 Critical severity

    langchat: Missing Authentication for Critical Functionality

    CVE-2026-111704LangChat

    LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext pass